sl-service-account commented 7 years ago

Steps to Reproduce

Make a brand new alt, login to the SL Marketplace and buy anything for 0 linden, after that both the web profile and the mesh upload status webpage ( https://secondlife.com/my/account/ip/index.php?lang=en-US ) would say you have payment info on file

Actual Behavior

Just noticed a person at a sandbox uploading some mesh creations without having payment info, later ive checked one of my alt who can do the same by just complete the mesh upload IP tutorial because the website says on the mesh upload status they having payment info, i never gave this alt any payment info at all. I included two snapshot one shows this object from this guy who having no payment info the table is clearly a mesh the wireframe is visible, second snapshot are from my alt account who's mesh upload status says he has payment info while he should not have it.

Expected Behavior

People should not able to upload mesh without getting payment info first.

Other information

Attachments

46477c3e01b8416c8642e2f8b8897056.png 2016-12-22 16:39:03
4b66815414534c10a463722d49bfa34f.png 2016-12-22 16:39:03

Links

| Field | Value | | ------------- | ------------- | | Issue | BUG-41097 | | Summary | Some people able to upload mesh without payment info. | | Type | Bug | | Priority | Unset | | Status | Accepted | | Resolution | Accepted | | Reporter | Venompapa (venompapa) | | Created at | 2016-12-22T21:39:03Z | | Updated at | 2017-01-05T19:05:10Z | ``` { 'Business Unit': ['Platform'], 'Date of First Response': '2016-12-22T17:41:09.463-0600', 'ReOpened Count': 0.0, 'Severity': 'Unset', 'System': 'Website', 'Target Viewer Version': 'viewer-development', 'What just happened?': "Just noticed a person at a sandbox uploading some mesh creations without having payment info, later ive checked one of my alt who can do the same by just complete the mesh upload IP tutorial because the website says on the mesh upload status they having payment info, i never gave this alt any payment info at all.\r\nI included two snapshot one shows this object from this guy who having no payment info the table is clearly a mesh the wireframe is visible, second snapshot are from my alt account who's mesh upload status says he has payment info while he should not have it.", 'What were you doing when it happened?': 'Explained above.', 'What were you expecting to happen instead?': 'People should not able to upload mesh without getting payment info first.', } ```

sl-service-account commented 7 years ago

Venompapa commented at 2016-12-22T22:11:58Z, updated at 2016-12-22T22:31:48Z

Lol i messed up the logins, was supposed to send the jira from this account.

sl-service-account commented 7 years ago

Lucia Nightfire commented at 2016-12-22T23:41:09Z

People shouldn't be able to upload textures, sounds, animations, and mesh without paying, but LL has yet to stop illegal tpv's from doing it.

sl-service-account commented 7 years ago

Venompapa commented at 2016-12-22T23:56:34Z

Its not a third party viewer issue neither about not paying L$ for the upload, for some reason on my alt (BadWulfTek) SL thinks he having a payment info on file (second attached image) while i never did gave him payment info, i guess same with the dude who i stumbled into.

sl-service-account commented 7 years ago

Whirly Fizzle commented at 2016-12-23T00:14:54Z

Do you want me to switch the reporter of this issue over to Venompapa ?

sl-service-account commented 7 years ago

Whirly Fizzle commented at 2016-12-23T03:28:49Z

This is just a side effect of another bug. There are two (that I know of) separate payment info status "databases" and they often fail to sync up.

The payment info status on web profiles & mesh upload PIOF status.
The payment info status everything else uses - scripts using llRequestAgentData, Land access needing PIOF, legacy profiles (as in your Firestorm profile image).

The sandbox guy, magyarsrac (Resident): The web side of things thinks he does have PIOF. https://my.secondlife.com/magyarsrac#about_tab shows "Payment info on file". So it's expected this account can upload mesh because the PIOF check for mesh upload uses the PIOF from the web end.

This account however will show no PIOF when payment status is queried by script, no PIOF in Firestorm legacy profile and this account will not be able to access land that needs PIOF to enter. To fix this problem this account will need to make a L$ purchase once and that will sync up the web end with everything else.

Script to check the "real" PIOF status of magyarsrac Resident: Plop this script in a box & touch the box.

key payment_query;

default
{
   touch_start(integer num_detected){
   payment_query = llRequestAgentData("5d879bb5-e7a6-42e2-a67c-b3a22c51dff0", DATA_PAYINFO);
}

// 5d879bb5-e7a6-42e2-a67c-b3a22c51dff0 is key for agent magyarsrac Resident

     dataserver(key queryid, string data){
        if ( payment_query == queryid ){
            if(data == "0")llSay(0, "No payment info on file.");
            if(data == "1")llSay(0, "Payment info On file.");
            if(data == "2")llSay(0, "Payment info used.");
            if(data == "3")llSay(0, "Payment info on file and used.");
        }            
    }
}

Result from the script is "No payment info on file".

Your alt - BadWulfTek Same situation as above. The web end thinks you do have PIOF. Scripts, land access settings & everything else thinks you do not have PIOF. If your alt purchases L$ once, that account should then correctly show PIOF everywhere.

You can check payment info status for your alt with this script, which shows the PIOF status that everything else uses apart from the web end.

key payment_query;

default
{
   touch_start(integer num_detected){
   payment_query = llRequestAgentData("c517be1e-8af0-4b9c-b8a0-a5ebcb3c14b0", DATA_PAYINFO);
}

// c517be1e-8af0-4b9c-b8a0-a5ebcb3c14b0 is key for agent BadWulfTek Resident

     dataserver(key queryid, string data){
        if ( payment_query == queryid ){
            if(data == "0")llSay(0, "No payment info on file.");
            if(data == "1")llSay(0, "Payment info On file.");
            if(data == "2")llSay(0, "Payment info used.");
            if(data == "3")llSay(0, "Payment info on file and used.");
        }            
    }
}

The result is "No payment info on file."

BadWulfTek could have gained payment info on file status at the web end only by either purchasing something with L$ on the Marketplace or adding billing information at https://secondlife.com/my/account/billing.php for example.

sl-service-account commented 7 years ago

Venompapa commented at 2016-12-23T06:08:11Z

Yes please switch the reporter to me, also i didnt been adding billing information to my alt. Probably maybe because bought few thing for him from the MP once.

sl-service-account commented 7 years ago

Venompapa commented at 2016-12-23T12:16:38Z, updated at 2016-12-23T12:25:04Z

Okkay so turns out this can be reproduced easily, must being something bugging out in the system at LL. So i made a brand new alt named it as TestAvatar121212. After logging in the SL website and also looking at his profile i see this: http://prnt.sc/dn09vm http://prnt.sc/dn0a08 Now right after this i logged him into the Marketplace and bought a demo item for 0 linde, soon after this: http://prnt.sc/dn0ch8 http://prnt.sc/dn0d1h Both the web profile and the mesh upload status webpage says he has payment info on file while the firestorm profile says he does not, well since he have no payment info, i cant even go to skillgame regions with him: http://prntscr.com/dn0ipo For last check i done the mesh IP test and also SL did let me upload mesh with him: http://prnt.sc/dn0exz http://prnt.sc/dn0ffl

Correct me if im wrong but as far as i remember buying anything from the MP not should be enough get permission for upload meshes. I clearly remember when bought couple things from the MP with my first alt what i registered few month after my main didnt got the payment info on file status right on the mesh upload status page.

sl-service-account commented 7 years ago

Whirly Fizzle commented at 2016-12-23T17:16:12Z

Correct me if im wrong but as far as i remember buying anything from the MP not should be enough get permission for upload meshes.

Right, that shouldn't happen now. There was a bug that caused this to happen a while ago but I thought it was fixed. So either it was never fixed or it regressed.

Original bug reports that making L$ purchases (even L$0) on the Marketplace adds PIOF status to the account at the web end only were filed at BUG-4424 and BUG-4432. Those bug reports are not public, but they just report exactly what you tested in your last comment.

sl-service-account commented 7 years ago

Whirly Fizzle commented at 2016-12-23T17:18:23Z

Reporter changed to Venompapa as requested.

secondlife / jira-archive

[BUG-41097] Some people able to upload mesh without payment info. #12685

Steps to Reproduce

Actual Behavior

Expected Behavior

Other information

Attachments

Links

Related